diff --git a/.notation/policy.json b/.notation/policy.json
new file mode 100644
index 0000000..e811ef6
--- /dev/null
+++ b/.notation/policy.json
@@ -0,0 +1,16 @@
+{
+    "version": "1.0",
+    "trustPolicies": [
+        {
+            "name": "fluxcd.io",
+            "registryScopes": [ "ghcr.io/jasonthedeveloper/podinfo-deploy" ],
+            "signatureVerification": {
+                "level" : "strict"
+            },
+            "trustStores": [ "ca:fluxcd.io" ],
+            "trustedIdentities": [
+                "*"
+            ]
+        }
+    ]
+}